Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa
File:                     323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (raw, json)
Hash identifier:          uF4kRCGUR/peRcqbeC7vxbDTK6FOTpwkAWObW012aIc=
Subject key identifier:   FC:00:AE:9D:3C:EF:3D:18:1C:FC:79:BA:98:A9:50:C3:ED:95:A6:6C
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       448F51B31F2C9630EDB9DCFC21F19F90C8FB89F6
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa
Signing time:             Mon 17 Jun 2024 10:57:05 +0000
ROA not before:           Mon 17 Jun 2024 10:52:05 +0000
ROA not after:            Mon 16 Jun 2025 10:57:05 +0000
asID:                     149301
IP address blocks:        2001:df3:efc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Oct 2024 17:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:51:b3:1f:2c:96:30:ed:b9:dc:fc:21:f1:9f:90:c8:fb:89:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jun 17 10:52:05 2024 GMT
            Not After : Jun 16 10:57:05 2025 GMT
        Subject: CN=FC00AE9D3CEF3D181CFC79BA98A950C3ED95A66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:93:99:be:83:df:19:b2:26:2c:5d:6a:e5:
                    7c:16:7b:48:67:c6:f3:7b:be:eb:c2:a6:9f:9b:a4:
                    7e:a5:1d:86:4c:f7:6b:44:d2:8d:dd:29:8f:bb:c6:
                    71:c6:58:7a:e3:97:47:03:e6:53:da:81:7e:a5:b0:
                    c7:ae:dd:c4:99:e9:c6:7a:b9:56:5a:bf:10:08:b5:
                    1e:f0:8e:8d:74:cb:a8:cd:1b:a6:f8:5d:ef:e0:74:
                    20:b7:c6:a4:9d:dd:f9:99:fa:a9:f6:0a:7e:23:12:
                    26:7a:06:8c:68:be:1a:d5:3f:ac:54:ac:d7:90:aa:
                    c7:4a:6d:7f:94:e5:d7:a8:62:51:38:3d:3b:78:63:
                    f8:c6:ac:bc:dd:27:04:51:98:fa:48:6b:af:82:5b:
                    e1:3d:1d:1b:b1:e6:30:3c:9b:26:74:89:c2:d3:3c:
                    68:20:d0:b9:33:0a:55:d2:d8:89:6c:c3:b0:ba:30:
                    ab:af:e5:7e:b7:c8:a2:55:54:43:a5:04:09:f9:cc:
                    58:01:d7:cb:a4:21:fb:5e:5a:9b:d5:ee:62:c1:fb:
                    cb:63:94:d4:fc:2e:10:4b:e5:32:4f:ba:35:23:ab:
                    0c:5c:34:c2:cb:c7:5d:19:6c:41:36:e7:01:08:90:
                    ff:b1:2f:45:62:91:65:13:fe:5d:3d:51:8a:16:3e:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:00:AE:9D:3C:EF:3D:18:1C:FC:79:BA:98:A9:50:C3:ED:95:A6:6C
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:efc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:b5:ee:a3:81:06:50:18:93:f3:7d:8d:dd:18:fa:46:ae:8d:
         d5:fc:86:a6:c9:be:ab:69:64:74:c7:be:00:5f:e3:64:89:0e:
         15:c8:7b:8e:b2:a4:ec:dd:32:cb:cc:09:36:19:2a:af:0c:a6:
         81:b9:74:24:18:1a:65:84:8d:cd:a7:94:4b:81:22:34:d5:6e:
         b3:21:b1:f4:8e:fa:fe:6b:73:c1:ae:98:e2:78:32:9d:19:66:
         42:3e:38:c6:fc:1e:0d:9a:40:d7:bb:98:e4:5c:6e:dd:d9:da:
         6a:98:2b:8f:89:be:5f:54:5e:d0:59:89:9a:92:50:2c:8c:9a:
         cf:0e:b0:fa:f9:e8:30:b3:87:fd:f5:35:c2:cd:c6:2a:eb:97:
         c2:7a:68:e0:2c:34:26:ee:ac:cf:6b:ad:43:e8:05:4e:2a:8f:
         6d:8d:3e:e4:33:f5:c5:e6:cb:7d:b3:9e:48:d1:6d:fa:96:26:
         53:d2:b0:ae:1b:6d:c5:7f:86:e7:65:7d:78:64:88:f1:3b:2b:
         fe:74:dc:44:5f:40:23:f2:06:f0:39:8d:9e:a5:50:3d:6b:0e:
         84:e0:1a:32:af:7e:5b:a0:96:99:1d:34:56:5a:67:86:d9:69:
         5a:4a:18:9b:44:f5:37:5c:27:e9:df:b0:7d:d0:37:c1:2a:48:
         02:2c:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:01:42 2024 by rpki-client on console.sobornost.net